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"What is claimed is: 

1 . A method for filtered application-to-application communicatioa, comprising: 

providing a communication interface to an application; 

filtering application data received from a process of said application 
according to a predetermined policy; and 

providing said filtered application data directly to communication 
hardware. 

2. The method of claim 1 further comprising; 

verifying the identity of said application prior to providing said filtered 
application data. 

3. The method of claim 2 further comprising: 

sending at least one security token. 

4. The method of claim 1 further comprising: 

verifying the identity of a machine participating in said process prior to 
providing said filtered application data. 

5 . The method of claim 4 further comprising: 

sending at least one security token. 

6. The method of claim 1, wherein providing said filtered application data 
comprises providing said filtered application data directly to a multi-channel 
network interface card having direct user-to-hardware access. 

7. The method of claim 6, wherein said multi-channel network interface card is an 
InfiniBand card. 

S. A method for filtered apphcation-to-apphcation communication comprising: 
providing a communication interface to an application; 
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filtering application data received from a process of said application; 
sending an authentication request to an authentication service; 
receiving authentication information; and 

providing said filtered application data directly to communication 
hardware. 

9. The method of claim 8 further comprising; 

verifying the identity of said application prior to providing said filtered 
application data. 

1 0 . The method of claim 9 further comprising: 

sending at least one security token 

1 1 . The method of claim 8 further comprising: 

verifying the identity of a machine participating in said process prior to 
providing said filtered application data, 

12. The method of claim 1 1 further comprising: 

sending at least one security token 

13. The method of claim 8, wherein providing said filtered application data 
comprises providing said filtered application data directly to a multi-channel 
network interface card having direct user-to-hardware access. 

14. The method of claim 13, wherein said multi-channel network interface card is 
an InfiniBand card, 

15. A system for filtered application-to-application communication comprising: 

multi-channel communication hardware; and 
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at least one application interface and filter operative to provide filtered 
data from an application process directly to said multi-channel communication 
hardware, 

The system of claim 15, wherein said communication hardware is a 
multi-channel network interface card having direct user-to-hardware access. 
The system of claim 16, wherein said multi-channel network interface card is 
an InfiniBand card. 

A system for filtered appKcatioti-to-application communication comprising: 
multi-channel communication hardware; 

at least one application interface and filter operative to provide filtered 
data &om an application process directly to said multi-channel communication 
hardware; and 

at least one authenticatiori service adapted to determine whether said 
application process is genuine and/or whether at least one machine 
participating in said application process is genuine. 

The system of claim 18, wherein said communication hardware is a 
multi-channel network interface card having a direct user-to-hardware access. 
The system of claim 19, wherein said multi-channel network interface card is 
an InfiniBand card. 
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